named.conf.html 75 KB
Newer Older
1
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2
<!--
Tinderbox User's avatar
Tinderbox User committed
3
 - Copyright (C) 2004-2019 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
4
 - 
Tinderbox User's avatar
Tinderbox User committed
5 6 7
 - This Source Code Form is subject to the terms of the Mozilla Public
 - License, v. 2.0. If a copy of the MPL was not distributed with this
 - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8
-->
9
<html lang="en">
Rob Austein's avatar
regen  
Rob Austein committed
10 11 12
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>named.conf</title>
Tinderbox User's avatar
Tinderbox User committed
13
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
Rob Austein's avatar
regen  
Rob Austein committed
14
</head>
Tinderbox User's avatar
Tinderbox User committed
15
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
Tinderbox User's avatar
Tinderbox User committed
16
<a name="man.named.conf"></a><div class="titlepage"></div>
Tinderbox User's avatar
Tinderbox User committed
17 18 19 20 21 22
  
  

  

  <div class="refnamediv">
Rob Austein's avatar
regen  
Rob Austein committed
23
<h2>Name</h2>
Tinderbox User's avatar
Tinderbox User committed
24 25 26 27
<p>
    <code class="filename">named.conf</code>
     &#8212; configuration file for <span class="command"><strong>named</strong></span>
  </p>
Rob Austein's avatar
regen  
Rob Austein committed
28
</div>
Tinderbox User's avatar
Tinderbox User committed
29 30 31 32

  

  <div class="refsynopsisdiv">
Rob Austein's avatar
regen  
Rob Austein committed
33
<h2>Synopsis</h2>
Tinderbox User's avatar
Tinderbox User committed
34 35 36 37 38 39
    <div class="cmdsynopsis"><p>
      <code class="command">named.conf</code> 
    </p></div>
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
40
<a name="id-1.7"></a><h2>DESCRIPTION</h2>
Tinderbox User's avatar
Tinderbox User committed
41 42

    <p><code class="filename">named.conf</code> is the configuration file
Rob Austein's avatar
regen  
Rob Austein committed
43
      for
Tinderbox User's avatar
Tinderbox User committed
44
      <span class="command"><strong>named</strong></span>.  Statements are enclosed
Rob Austein's avatar
regen  
Rob Austein committed
45 46 47 48
      in braces and terminated with a semi-colon.  Clauses in
      the statements are also semi-colon terminated.  The usual
      comment styles are supported:
    </p>
Tinderbox User's avatar
Tinderbox User committed
49
    <p>
Rob Austein's avatar
regen  
Rob Austein committed
50 51
      C style: /* */
    </p>
Tinderbox User's avatar
Tinderbox User committed
52
    <p>
Rob Austein's avatar
regen  
Rob Austein committed
53 54
      C++ style: // to end of line
    </p>
Tinderbox User's avatar
Tinderbox User committed
55
    <p>
Rob Austein's avatar
regen  
Rob Austein committed
56 57
      Unix style: # to end of line
    </p>
Tinderbox User's avatar
Tinderbox User committed
58 59 60
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
61
<a name="id-1.8"></a><h2>ACL</h2>
Tinderbox User's avatar
Tinderbox User committed
62
    <div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
63 64
acl<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
65 66 67
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
68
<a name="id-1.9"></a><h2>CONTROLS</h2>
Tinderbox User's avatar
Tinderbox User committed
69
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
70 71
controls{<br>
	inet(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>|<br>
72 73 74 75
	*)[port(<em class="replaceable"><code>integer</code></em>|*)]allow<br>
	{<em class="replaceable"><code>address_match_element</code></em>;...}[<br>
	keys{<em class="replaceable"><code>string</code></em>;...}][read-only<br>
	<em class="replaceable"><code>boolean</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
76
	unix<em class="replaceable"><code>quoted_string</code></em>perm<em class="replaceable"><code>integer</code></em><br>
77 78 79
	owner<em class="replaceable"><code>integer</code></em>group<em class="replaceable"><code>integer</code></em>[<br>
	keys{<em class="replaceable"><code>string</code></em>;...}][read-only<br>
	<em class="replaceable"><code>boolean</code></em>];<br>
Rob Austein's avatar
regen  
Rob Austein committed
80 81
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
82 83 84
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
85
<a name="id-1.10"></a><h2>DLZ</h2>
Tinderbox User's avatar
Tinderbox User committed
86
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
87 88 89
dlz<em class="replaceable"><code>string</code></em>{<br>
	database<em class="replaceable"><code>string</code></em>;<br>
	search<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
90 91
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
92 93 94
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
95 96 97 98 99 100 101
<a name="id-1.11"></a><h2>DNSSEC-KEYS</h2>
    <div class="literallayout"><p><br>
dnssec-keys{<em class="replaceable"><code>string</code></em>(static-key|<br>
initial-key)<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
<em class="replaceable"><code>quoted_string</code></em>;...};<br>
</p></div>
  </div>
Tinderbox User's avatar
Tinderbox User committed
102

Tinderbox User's avatar
Tinderbox User committed
103 104
  <div class="refsection">
<a name="id-1.12"></a><h2>DYNDB</h2>
Tinderbox User's avatar
Tinderbox User committed
105
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
106 107
dyndb<em class="replaceable"><code>string</code></em><em class="replaceable"><code>quoted_string</code></em>{<br>
<em class="replaceable"><code>unspecified-text</code></em>};<br>
Rob Austein's avatar
regen  
Rob Austein committed
108
</p></div>
Tinderbox User's avatar
Tinderbox User committed
109 110 111
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
112
<a name="id-1.13"></a><h2>KEY</h2>
Tinderbox User's avatar
Tinderbox User committed
113
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
114 115 116
key<em class="replaceable"><code>string</code></em>{<br>
	algorithm<em class="replaceable"><code>string</code></em>;<br>
	secret<em class="replaceable"><code>string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
117 118
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
119 120 121
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
122
<a name="id-1.14"></a><h2>LOGGING</h2>
Tinderbox User's avatar
Tinderbox User committed
123
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
124 125 126 127
logging{<br>
	category<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;...};<br>
	channel<em class="replaceable"><code>string</code></em>{<br>
		buffered<em class="replaceable"><code>boolean</code></em>;<br>
128 129
		file<em class="replaceable"><code>quoted_string</code></em>[versions(unlimited|<em class="replaceable"><code>integer</code></em>)]<br>
		[size<em class="replaceable"><code>size</code></em>][suffix(increment|timestamp)];<br>
Tinderbox User's avatar
Tinderbox User committed
130 131 132 133 134 135
		null;<br>
		print-category<em class="replaceable"><code>boolean</code></em>;<br>
		print-severity<em class="replaceable"><code>boolean</code></em>;<br>
		print-time(iso8601|iso8601-utc|local|<em class="replaceable"><code>boolean</code></em>);<br>
		severity<em class="replaceable"><code>log_severity</code></em>;<br>
		stderr;<br>
136
		syslog[<em class="replaceable"><code>syslog_facility</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
137
	};<br>
Automatic Updater's avatar
regen  
Automatic Updater committed
138 139
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
140 141 142
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
143
<a name="id-1.15"></a><h2>MANAGED-KEYS</h2>
Tinderbox User's avatar
Tinderbox User committed
144
  <p>Deprecated - see DNSSEC-KEYS.</p>
Tinderbox User's avatar
Tinderbox User committed
145
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
146 147 148 149
managed-keys{<em class="replaceable"><code>string</code></em>(static-key<br>
|initial-key)<em class="replaceable"><code>integer</code></em><br>
<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
<em class="replaceable"><code>quoted_string</code></em>;...};deprecated<br>
Rob Austein's avatar
regen  
Rob Austein committed
150
</p></div>
Tinderbox User's avatar
Tinderbox User committed
151 152 153
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
154
<a name="id-1.16"></a><h2>MASTERS</h2>
Tinderbox User's avatar
Tinderbox User committed
155
    <div class="literallayout"><p><br>
156 157 158 159
masters<em class="replaceable"><code>string</code></em>[port<em class="replaceable"><code>integer</code></em>][dscp<br>
<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[<br>
port<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<br>
<em class="replaceable"><code>integer</code></em>])[key<em class="replaceable"><code>string</code></em>];...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
160
</p></div>
Tinderbox User's avatar
Tinderbox User committed
161 162 163
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
164
<a name="id-1.17"></a><h2>OPTIONS</h2>
Tinderbox User's avatar
Tinderbox User committed
165
    <div class="literallayout"><p><br>
Rob Austein's avatar
regen  
Rob Austein committed
166
options{<br>
Tinderbox User's avatar
Tinderbox User committed
167 168 169 170 171 172 173 174 175 176 177
	allow-new-zones<em class="replaceable"><code>boolean</code></em>;<br>
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
178 179 180 181 182 183 184
	also-notify[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em>|<br>
	<em class="replaceable"><code>ipv4_address</code></em>[port<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>])[key<em class="replaceable"><code>string</code></em>];...};<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)<br>
	][dscp<em class="replaceable"><code>integer</code></em>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|<br>
	*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
185
	answer-cookie<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
186 187 188 189 190 191 192
	attach-cache<em class="replaceable"><code>string</code></em>;<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	auto-dnssec(allow|maintain|off);<br>
	automatic-interface-scan<em class="replaceable"><code>boolean</code></em>;<br>
	avoid-v4-udp-ports{<em class="replaceable"><code>portrange</code></em>;...};<br>
	avoid-v6-udp-ports{<em class="replaceable"><code>portrange</code></em>;...};<br>
	bindkeys-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
193
	blackhole{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
194
	cache-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
195 196 197
	catalog-zones{zone<em class="replaceable"><code>string</code></em>[default-masters[port<em class="replaceable"><code>integer</code></em>]<br>
	[dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<em class="replaceable"><code>integer</code></em>])[key<br>
198
	<em class="replaceable"><code>string</code></em>];...}][zone-directory<em class="replaceable"><code>quoted_string</code></em>][<br>
Tinderbox User's avatar
Tinderbox User committed
199
	in-memory<em class="replaceable"><code>boolean</code></em>][min-update-interval<em class="replaceable"><code>ttlval</code></em>];...};<br>
Tinderbox User's avatar
Tinderbox User committed
200 201 202 203
	check-dup-records(fail|warn|ignore);<br>
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
	check-mx(fail|warn|ignore);<br>
	check-mx-cname(fail|warn|ignore);<br>
204 205 206
	check-names(primary|master|<br>
	secondary|slave|response)(<br>
	fail|warn|ignore);<br>
Tinderbox User's avatar
Tinderbox User committed
207 208 209 210 211
	check-sibling<em class="replaceable"><code>boolean</code></em>;<br>
	check-spf(warn|ignore);<br>
	check-srv-cname(fail|warn|ignore);<br>
	check-wildcard<em class="replaceable"><code>boolean</code></em>;<br>
	clients-per-query<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
212
	cookie-algorithm(aes|siphash24);<br>
Tinderbox User's avatar
Tinderbox User committed
213 214 215
	cookie-secret<em class="replaceable"><code>string</code></em>;<br>
	coresize(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
	datasize(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
216
	deny-answer-addresses{<em class="replaceable"><code>address_match_element</code></em>;...}[<br>
217 218 219
	except-from{<em class="replaceable"><code>string</code></em>;...}];<br>
	deny-answer-aliases{<em class="replaceable"><code>string</code></em>;...}[except-from{<em class="replaceable"><code>string</code></em>;...<br>
	}];<br>
Tinderbox User's avatar
Tinderbox User committed
220
	dialup(notify|notify-passive|passive|refresh|<em class="replaceable"><code>boolean</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
221
	directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
222 223 224 225 226 227 228 229 230 231 232 233 234 235 236
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;<br>
	...};<br>
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;<br>
	...};<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
	dns64<em class="replaceable"><code>netprefix</code></em>{<br>
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
		clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		exclude{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		mapped{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
237
	dnskey-sig-validity<em class="replaceable"><code>integer</code></em>;<br>
238 239
	dnsrps-enable<em class="replaceable"><code>boolean</code></em>;<br>
	dnsrps-options{<em class="replaceable"><code>unspecified-text</code></em>};<br>
Tinderbox User's avatar
Tinderbox User committed
240 241 242 243 244 245 246
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-loadkeys-interval<em class="replaceable"><code>integer</code></em>;<br>
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-update-mode(maintain|no-resign);<br>
	dnssec-validation(yes|no|auto);<br>
Tinderbox User's avatar
Tinderbox User committed
247 248 249 250 251 252 253 254 255
	dnstap{(all|auth|client|forwarder|<br>
	resolver|update)[(query|response)];<br>
	...};<br>
	dnstap-identity(<em class="replaceable"><code>quoted_string</code></em>|none|<br>
	hostname);<br>
	dnstap-output(file|unix)<em class="replaceable"><code>quoted_string</code></em>[<br>
	size(unlimited|<em class="replaceable"><code>size</code></em>)][versions(<br>
	unlimited|<em class="replaceable"><code>integer</code></em>)][suffix(increment<br>
	|timestamp)];<br>
Tinderbox User's avatar
Tinderbox User committed
256 257
	dnstap-version(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	dscp<em class="replaceable"><code>integer</code></em>;<br>
258 259 260 261
	dual-stack-servers[port<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>quoted_string</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv4_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]);...};<br>
Rob Austein's avatar
regen  
Rob Austein committed
262
	dump-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
263 264 265 266 267
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
	empty-server<em class="replaceable"><code>string</code></em>;<br>
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
	fetch-quota-params<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>fixedpoint</code></em><em class="replaceable"><code>fixedpoint</code></em><em class="replaceable"><code>fixedpoint</code></em>;<br>
268 269
	fetches-per-server<em class="replaceable"><code>integer</code></em>[(drop|fail)];<br>
	fetches-per-zone<em class="replaceable"><code>integer</code></em>[(drop|fail)];<br>
Tinderbox User's avatar
Tinderbox User committed
270 271 272
	files(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
	flush-zones-on-shutdown<em class="replaceable"><code>boolean</code></em>;<br>
	forward(first|only);<br>
273 274
	forwarders[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>ipv4_address</code></em><br>
	|<em class="replaceable"><code>ipv6_address</code></em>)[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>];...};<br>
Tinderbox User's avatar
Tinderbox User committed
275 276 277 278 279 280
	fstrm-set-buffer-hint<em class="replaceable"><code>integer</code></em>;<br>
	fstrm-set-flush-timeout<em class="replaceable"><code>integer</code></em>;<br>
	fstrm-set-input-queue-size<em class="replaceable"><code>integer</code></em>;<br>
	fstrm-set-output-notify-threshold<em class="replaceable"><code>integer</code></em>;<br>
	fstrm-set-output-queue-model(mpsc|spsc);<br>
	fstrm-set-output-queue-size<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
281
	fstrm-set-reopen-interval<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
282
	geoip-directory(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
283
	glue-cache<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
284 285
	heartbeat-interval<em class="replaceable"><code>integer</code></em>;<br>
	hostname(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
Tinderbox User's avatar
Tinderbox User committed
286
	inline-signing<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
287
	interface-interval<em class="replaceable"><code>ttlval</code></em>;<br>
288 289
	ixfr-from-differences(primary|master|secondary|slave|<br>
	<em class="replaceable"><code>boolean</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
290
	keep-response-order{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
291 292
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
	lame-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
293 294
	listen-on[port<em class="replaceable"><code>integer</code></em>][dscp<br>
	<em class="replaceable"><code>integer</code></em>]{<br>
Tinderbox User's avatar
Tinderbox User committed
295
	<em class="replaceable"><code>address_match_element</code></em>;...};<br>
296 297
	listen-on-v6[port<em class="replaceable"><code>integer</code></em>][dscp<br>
	<em class="replaceable"><code>integer</code></em>]{<br>
Tinderbox User's avatar
Tinderbox User committed
298
	<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
299
	lmdb-mapsize<em class="replaceable"><code>sizeval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
300 301 302 303
	lock-file(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	managed-keys-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
	masterfile-format(map|raw|text);<br>
	masterfile-style(full|relative);<br>
Rob Austein's avatar
regen  
Rob Austein committed
304
	match-mapped-addresses<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
305
	max-cache-size(default|unlimited|<em class="replaceable"><code>sizeval</code></em>|<em class="replaceable"><code>percentage</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
306
	max-cache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
307
	max-clients-per-query<em class="replaceable"><code>integer</code></em>;<br>
308
	max-journal-size(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
309
	max-ncache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
310 311 312 313 314 315
	max-records<em class="replaceable"><code>integer</code></em>;<br>
	max-recursion-depth<em class="replaceable"><code>integer</code></em>;<br>
	max-recursion-queries<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	max-rsa-exponent-size<em class="replaceable"><code>integer</code></em>;<br>
316
	max-stale-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
317 318 319 320 321 322 323
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	max-zone-ttl(unlimited|<em class="replaceable"><code>ttlval</code></em>);<br>
	memstatistics<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
324
	memstatistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
325
	message-compression<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
326 327
	min-cache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
	min-ncache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
328 329 330 331 332
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	minimal-any<em class="replaceable"><code>boolean</code></em>;<br>
	minimal-responses(no-auth|no-auth-recursive|<em class="replaceable"><code>boolean</code></em>);<br>
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
333
	new-zones-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
334 335 336 337 338
	no-case-compress{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	notify(explicit|master-only|<em class="replaceable"><code>boolean</code></em>);<br>
	notify-delay<em class="replaceable"><code>integer</code></em>;<br>
	notify-rate<em class="replaceable"><code>integer</code></em>;<br>
339 340 341 342
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)]<br>
	[dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
343 344 345 346
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
	nta-lifetime<em class="replaceable"><code>ttlval</code></em>;<br>
	nta-recheck<em class="replaceable"><code>ttlval</code></em>;<br>
	nxdomain-redirect<em class="replaceable"><code>string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
347 348
	pid-file(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	port<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
349
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
350
	prefetch<em class="replaceable"><code>integer</code></em>[<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
351
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
352
	qname-minimization(strict|relaxed|disabled|off);<br>
353 354 355 356 357 358
	query-source(([address](<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv4_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
	query-source-v6(([address](<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv6_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
Rob Austein's avatar
regen  
Rob Austein committed
359
	querylog<em class="replaceable"><code>boolean</code></em>;<br>
360
	random-device(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
Tinderbox User's avatar
Tinderbox User committed
361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379
	rate-limit{<br>
		all-per-second<em class="replaceable"><code>integer</code></em>;<br>
		errors-per-second<em class="replaceable"><code>integer</code></em>;<br>
		exempt-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		ipv4-prefix-length<em class="replaceable"><code>integer</code></em>;<br>
		ipv6-prefix-length<em class="replaceable"><code>integer</code></em>;<br>
		log-only<em class="replaceable"><code>boolean</code></em>;<br>
		max-table-size<em class="replaceable"><code>integer</code></em>;<br>
		min-table-size<em class="replaceable"><code>integer</code></em>;<br>
		nodata-per-second<em class="replaceable"><code>integer</code></em>;<br>
		nxdomains-per-second<em class="replaceable"><code>integer</code></em>;<br>
		qps-scale<em class="replaceable"><code>integer</code></em>;<br>
		referrals-per-second<em class="replaceable"><code>integer</code></em>;<br>
		responses-per-second<em class="replaceable"><code>integer</code></em>;<br>
		slip<em class="replaceable"><code>integer</code></em>;<br>
		window<em class="replaceable"><code>integer</code></em>;<br>
	};<br>
	recursing-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
380
	recursive-clients<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
381 382 383 384 385
	request-expire<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-nsid<em class="replaceable"><code>boolean</code></em>;<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	reserved-sockets<em class="replaceable"><code>integer</code></em>;<br>
386
	resolver-nonbackoff-tries<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
387
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
388
	resolver-retry-interval<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
389 390
	response-padding{<em class="replaceable"><code>address_match_element</code></em>;...}block-size<br>
	<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
391 392 393 394 395 396
	response-policy{zone<em class="replaceable"><code>string</code></em>[add-soa<em class="replaceable"><code>boolean</code></em>][log<br>
	<em class="replaceable"><code>boolean</code></em>][max-policy-ttl<em class="replaceable"><code>ttlval</code></em>][min-update-interval<br>
	<em class="replaceable"><code>ttlval</code></em>][policy(cname|disabled|drop|given|no-op|<br>
	nodata|nxdomain|passthru|tcp-only<em class="replaceable"><code>quoted_string</code></em>)][<br>
	recursive-only<em class="replaceable"><code>boolean</code></em>][nsip-enable<em class="replaceable"><code>boolean</code></em>][<br>
	nsdname-enable<em class="replaceable"><code>boolean</code></em>];...}[add-soa<em class="replaceable"><code>boolean</code></em>][<br>
Tinderbox User's avatar
Tinderbox User committed
397 398 399 400 401 402
	break-dnssec<em class="replaceable"><code>boolean</code></em>][max-policy-ttl<em class="replaceable"><code>ttlval</code></em>][<br>
	min-update-interval<em class="replaceable"><code>ttlval</code></em>][min-ns-dots<em class="replaceable"><code>integer</code></em>][<br>
	nsip-wait-recurse<em class="replaceable"><code>boolean</code></em>][qname-wait-recurse<em class="replaceable"><code>boolean</code></em>]<br>
	[recursive-only<em class="replaceable"><code>boolean</code></em>][nsip-enable<em class="replaceable"><code>boolean</code></em>][<br>
	nsdname-enable<em class="replaceable"><code>boolean</code></em>][dnsrps-enable<em class="replaceable"><code>boolean</code></em>][<br>
	dnsrps-options{<em class="replaceable"><code>unspecified-text</code></em>}];<br>
403
	root-delegation-only[exclude{<em class="replaceable"><code>string</code></em>;...}];<br>
Tinderbox User's avatar
Tinderbox User committed
404
	root-key-sentinel<em class="replaceable"><code>boolean</code></em>;<br>
405 406
	rrset-order{[class<em class="replaceable"><code>string</code></em>][type<em class="replaceable"><code>string</code></em>][name<br>
	<em class="replaceable"><code>quoted_string</code></em>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
407 408
	secroots-file<em class="replaceable"><code>quoted_string</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
409
	serial-query-rate<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
410 411 412 413 414 415 416 417 418
	serial-update-method(date|increment|unixtime);<br>
	server-id(<em class="replaceable"><code>quoted_string</code></em>|none|hostname);<br>
	servfail-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
	session-keyalg<em class="replaceable"><code>string</code></em>;<br>
	session-keyfile(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
	session-keyname<em class="replaceable"><code>string</code></em>;<br>
	sig-signing-nodes<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-signatures<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-type<em class="replaceable"><code>integer</code></em>;<br>
419
	sig-validity-interval<em class="replaceable"><code>integer</code></em>[<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
420 421
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	stacksize(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
422 423
	stale-answer-enable<em class="replaceable"><code>boolean</code></em>;<br>
	stale-answer-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
424
	startup-notify-rate<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
425
	statistics-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
426
	synth-from-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
427
	tcp-advertised-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
428
	tcp-clients<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
429 430 431
	tcp-idle-timeout<em class="replaceable"><code>integer</code></em>;<br>
	tcp-initial-timeout<em class="replaceable"><code>integer</code></em>;<br>
	tcp-keepalive-timeout<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
432 433
	tcp-listen-queue<em class="replaceable"><code>integer</code></em>;<br>
	tkey-dhkey<em class="replaceable"><code>quoted_string</code></em><em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
434
	tkey-domain<em class="replaceable"><code>quoted_string</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
435
	tkey-gssapi-credential<em class="replaceable"><code>quoted_string</code></em>;<br>
Automatic Updater's avatar
Automatic Updater committed
436
	tkey-gssapi-keytab<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
437
	transfer-format(many-answers|one-answer);<br>
Tinderbox User's avatar
Tinderbox User committed
438
	transfer-message-size<em class="replaceable"><code>integer</code></em>;<br>
439 440 441 442
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)<br>
	][dscp<em class="replaceable"><code>integer</code></em>];<br>
Rob Austein's avatar
regen  
Rob Austein committed
443 444
	transfers-in<em class="replaceable"><code>integer</code></em>;<br>
	transfers-out<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
445 446 447
	transfers-per-ns<em class="replaceable"><code>integer</code></em>;<br>
	trust-anchor-telemetry<em class="replaceable"><code>boolean</code></em>;//experimental<br>
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
448
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
449
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
450 451 452
	use-v4-udp-ports{<em class="replaceable"><code>portrange</code></em>;...};<br>
	use-v6-udp-ports{<em class="replaceable"><code>portrange</code></em>;...};<br>
	v6-bias<em class="replaceable"><code>integer</code></em>;<br>
453
	validate-except{<em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
454
	version(<em class="replaceable"><code>quoted_string</code></em>|none);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
455 456
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
457
	zone-statistics(full|terse|none|<em class="replaceable"><code>boolean</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
458 459
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
460 461 462
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
463
<a name="id-1.18"></a><h2>PLUGIN</h2>
Tinderbox User's avatar
Tinderbox User committed
464 465 466 467 468 469 470
    <div class="literallayout"><p><br>
plugin(query)<em class="replaceable"><code>string</code></em>[{<em class="replaceable"><code>unspecified-text</code></em><br>
}];<br>
</p></div>
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
471
<a name="id-1.19"></a><h2>SERVER</h2>
Tinderbox User's avatar
Tinderbox User committed
472
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
473 474 475 476 477 478 479
server<em class="replaceable"><code>netprefix</code></em>{<br>
	bogus<em class="replaceable"><code>boolean</code></em>;<br>
	edns<em class="replaceable"><code>boolean</code></em>;<br>
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	edns-version<em class="replaceable"><code>integer</code></em>;<br>
	keys<em class="replaceable"><code>server_key</code></em>;<br>
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
480 481 482 483
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)]<br>
	[dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
484
	padding<em class="replaceable"><code>integer</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
485
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
486 487 488 489 490 491
	query-source(([address](<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv4_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
	query-source-v6(([address](<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv6_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
492
	request-expire<em class="replaceable"><code>boolean</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
493
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
494 495 496 497 498
	request-nsid<em class="replaceable"><code>boolean</code></em>;<br>
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	tcp-keepalive<em class="replaceable"><code>boolean</code></em>;<br>
	tcp-only<em class="replaceable"><code>boolean</code></em>;<br>
	transfer-format(many-answers|one-answer);<br>
499 500 501 502
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)<br>
	][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
503 504 505
	transfers<em class="replaceable"><code>integer</code></em>;<br>
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
506 507 508
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
509
<a name="id-1.20"></a><h2>STATISTICS-CHANNELS</h2>
Tinderbox User's avatar
Tinderbox User committed
510
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
511 512
statistics-channels{<br>
	inet(<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>|<br>
513
	*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
Tinderbox User's avatar
Tinderbox User committed
514
	allow{<em class="replaceable"><code>address_match_element</code></em>;...<br>
515
	}];<br>
Tinderbox User's avatar
Tinderbox User committed
516 517
};<br>
</p></div>
Tinderbox User's avatar
Tinderbox User committed
518 519 520
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
521 522
<a name="id-1.21"></a><h2>TRUSTED-KEYS</h2>
  <p>Deprecated - see DNSSEC-KEYS.</p>
Tinderbox User's avatar
Tinderbox User committed
523
    <div class="literallayout"><p><br>
Tinderbox User's avatar
Tinderbox User committed
524 525
trusted-keys{<em class="replaceable"><code>string</code></em><em class="replaceable"><code>integer</code></em><br>
<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
Tinderbox User's avatar
Tinderbox User committed
526
<em class="replaceable"><code>quoted_string</code></em>;...};deprecated<br>
Tinderbox User's avatar
Tinderbox User committed
527
</p></div>
Tinderbox User's avatar
Tinderbox User committed
528 529 530
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
531
<a name="id-1.22"></a><h2>VIEW</h2>
Tinderbox User's avatar
Tinderbox User committed
532
    <div class="literallayout"><p><br>
533
view<em class="replaceable"><code>string</code></em>[<em class="replaceable"><code>class</code></em>]{<br>
Tinderbox User's avatar
Tinderbox User committed
534 535 536 537 538 539 540 541 542 543 544
	allow-new-zones<em class="replaceable"><code>boolean</code></em>;<br>
	allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-cache{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-cache-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-recursion{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-recursion-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
545 546 547 548 549 550 551
	also-notify[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em>|<br>
	<em class="replaceable"><code>ipv4_address</code></em>[port<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>])[key<em class="replaceable"><code>string</code></em>];...};<br>
	alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)<br>
	][dscp<em class="replaceable"><code>integer</code></em>];<br>
	alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|<br>
	*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
552 553 554 555
	attach-cache<em class="replaceable"><code>string</code></em>;<br>
	auth-nxdomain<em class="replaceable"><code>boolean</code></em>;//defaultchanged<br>
	auto-dnssec(allow|maintain|off);<br>
	cache-file<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
556 557 558
	catalog-zones{zone<em class="replaceable"><code>string</code></em>[default-masters[port<em class="replaceable"><code>integer</code></em>]<br>
	[dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<em class="replaceable"><code>integer</code></em>])[key<br>
559
	<em class="replaceable"><code>string</code></em>];...}][zone-directory<em class="replaceable"><code>quoted_string</code></em>][<br>
Tinderbox User's avatar
Tinderbox User committed
560
	in-memory<em class="replaceable"><code>boolean</code></em>][min-update-interval<em class="replaceable"><code>ttlval</code></em>];...};<br>
Tinderbox User's avatar
Tinderbox User committed
561
	check-dup-records(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
562
	check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
563
	check-mx(fail|warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
564
	check-mx-cname(fail|warn|ignore);<br>
565 566 567
	check-names(primary|master|<br>
	secondary|slave|response)(<br>
	fail|warn|ignore);<br>
Tinderbox User's avatar
Tinderbox User committed
568 569
	check-sibling<em class="replaceable"><code>boolean</code></em>;<br>
	check-spf(warn|ignore);<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
570
	check-srv-cname(fail|warn|ignore);<br>
Tinderbox User's avatar
Tinderbox User committed
571 572
	check-wildcard<em class="replaceable"><code>boolean</code></em>;<br>
	clients-per-query<em class="replaceable"><code>integer</code></em>;<br>
573
	deny-answer-addresses{<em class="replaceable"><code>address_match_element</code></em>;...}[<br>
574 575 576
	except-from{<em class="replaceable"><code>string</code></em>;...}];<br>
	deny-answer-aliases{<em class="replaceable"><code>string</code></em>;...}[except-from{<em class="replaceable"><code>string</code></em>;...<br>
	}];<br>
Tinderbox User's avatar
Tinderbox User committed
577 578 579 580 581 582 583 584 585
	dialup(notify|notify-passive|passive|refresh|<em class="replaceable"><code>boolean</code></em>);<br>
	disable-algorithms<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;<br>
	...};<br>
	disable-ds-digests<em class="replaceable"><code>string</code></em>{<em class="replaceable"><code>string</code></em>;<br>
	...};<br>
	disable-empty-zone<em class="replaceable"><code>string</code></em>;<br>
	dlz<em class="replaceable"><code>string</code></em>{<br>
		database<em class="replaceable"><code>string</code></em>;<br>
		search<em class="replaceable"><code>boolean</code></em>;<br>
586
	};<br>
Tinderbox User's avatar
Tinderbox User committed
587
	dns64<em class="replaceable"><code>netprefix</code></em>{<br>
Automatic Updater's avatar
Automatic Updater committed
588
		break-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
589 590 591
		clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		exclude{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		mapped{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
Automatic Updater's avatar
Automatic Updater committed
592 593 594
		recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
		suffix<em class="replaceable"><code>ipv6_address</code></em>;<br>
	};<br>
Tinderbox User's avatar
Tinderbox User committed
595 596
	dns64-contact<em class="replaceable"><code>string</code></em>;<br>
	dns64-server<em class="replaceable"><code>string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
597
	dnskey-sig-validity<em class="replaceable"><code>integer</code></em>;<br>
598 599
	dnsrps-enable<em class="replaceable"><code>boolean</code></em>;<br>
	dnsrps-options{<em class="replaceable"><code>unspecified-text</code></em>};<br>
Tinderbox User's avatar
Tinderbox User committed
600 601
	dnssec-accept-expired<em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
602 603 604
	dnssec-keys{<em class="replaceable"><code>string</code></em>(static-key|<br>
	initial-key)<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
	<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>quoted_string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
605 606 607 608 609
	dnssec-loadkeys-interval<em class="replaceable"><code>integer</code></em>;<br>
	dnssec-must-be-secure<em class="replaceable"><code>string</code></em><em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
	dnssec-update-mode(maintain|no-resign);<br>
	dnssec-validation(yes|no|auto);<br>
Tinderbox User's avatar
Tinderbox User committed
610 611 612
	dnstap{(all|auth|client|forwarder|<br>
	resolver|update)[(query|response)];<br>
	...};<br>
613 614 615 616
	dual-stack-servers[port<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>quoted_string</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv4_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[port<br>
	<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]);...};<br>
Tinderbox User's avatar
Tinderbox User committed
617 618 619
	dyndb<em class="replaceable"><code>string</code></em><em class="replaceable"><code>quoted_string</code></em>{<br>
	<em class="replaceable"><code>unspecified-text</code></em>};<br>
	edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
620
	empty-contact<em class="replaceable"><code>string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
621
	empty-server<em class="replaceable"><code>string</code></em>;<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
622
	empty-zones-enable<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
623
	fetch-quota-params<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>fixedpoint</code></em><em class="replaceable"><code>fixedpoint</code></em><em class="replaceable"><code>fixedpoint</code></em>;<br>
624 625
	fetches-per-server<em class="replaceable"><code>integer</code></em>[(drop|fail)];<br>
	fetches-per-zone<em class="replaceable"><code>integer</code></em>[(drop|fail)];<br>
Rob Austein's avatar
regen  
Rob Austein committed
626
	forward(first|only);<br>
627 628 629
	forwarders[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>ipv4_address</code></em><br>
	|<em class="replaceable"><code>ipv6_address</code></em>)[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>];...};<br>
	glue-cache<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
630
	inline-signing<em class="replaceable"><code>boolean</code></em>;<br>
631 632
	ixfr-from-differences(primary|master|secondary|slave|<br>
	<em class="replaceable"><code>boolean</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
633 634 635
	key<em class="replaceable"><code>string</code></em>{<br>
		algorithm<em class="replaceable"><code>string</code></em>;<br>
		secret<em class="replaceable"><code>string</code></em>;<br>
636
	};<br>
Tinderbox User's avatar
Tinderbox User committed
637 638
	key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
	lame-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
639
	lmdb-mapsize<em class="replaceable"><code>sizeval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
640 641 642 643 644
	managed-keys{<em class="replaceable"><code>string</code></em>(<br>
	static-key|initial-key<br>
	)<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
	<em class="replaceable"><code>integer</code></em><br>
	<em class="replaceable"><code>quoted_string</code></em>;...};deprecated<br>
Tinderbox User's avatar
Tinderbox User committed
645 646 647 648 649 650
	masterfile-format(map|raw|text);<br>
	masterfile-style(full|relative);<br>
	match-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-destinations{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	match-recursive-only<em class="replaceable"><code>boolean</code></em>;<br>
	max-cache-size(default|unlimited|<em class="replaceable"><code>sizeval</code></em>|<em class="replaceable"><code>percentage</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
651
	max-cache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
652
	max-clients-per-query<em class="replaceable"><code>integer</code></em>;<br>
653
	max-journal-size(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
654
	max-ncache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
655
	max-records<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
656 657 658 659
	max-recursion-depth<em class="replaceable"><code>integer</code></em>;<br>
	max-recursion-queries<em class="replaceable"><code>integer</code></em>;<br>
	max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
	max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
660
	max-stale-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
661 662
	max-transfer-idle-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-idle-out<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
663 664 665 666 667
	max-transfer-time-in<em class="replaceable"><code>integer</code></em>;<br>
	max-transfer-time-out<em class="replaceable"><code>integer</code></em>;<br>
	max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	max-zone-ttl(unlimited|<em class="replaceable"><code>ttlval</code></em>);<br>
	message-compression<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
668 669
	min-cache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
	min-ncache-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Rob Austein's avatar
regen  
Rob Austein committed
670
	min-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
671 672 673
	min-retry-time<em class="replaceable"><code>integer</code></em>;<br>
	minimal-any<em class="replaceable"><code>boolean</code></em>;<br>
	minimal-responses(no-auth|no-auth-recursive|<em class="replaceable"><code>boolean</code></em>);<br>
Rob Austein's avatar
regen  
Rob Austein committed
674
	multi-master<em class="replaceable"><code>boolean</code></em>;<br>
675
	new-zones-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
676 677 678 679
	no-case-compress{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
	nocookie-udp-size<em class="replaceable"><code>integer</code></em>;<br>
	notify(explicit|master-only|<em class="replaceable"><code>boolean</code></em>);<br>
	notify-delay<em class="replaceable"><code>integer</code></em>;<br>
680 681 682 683
	notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)]<br>
	[dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
684 685 686 687
	notify-to-soa<em class="replaceable"><code>boolean</code></em>;<br>
	nta-lifetime<em class="replaceable"><code>ttlval</code></em>;<br>
	nta-recheck<em class="replaceable"><code>ttlval</code></em>;<br>
	nxdomain-redirect<em class="replaceable"><code>string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
688 689
	plugin(query)<em class="replaceable"><code>string</code></em>[{<br>
	<em class="replaceable"><code>unspecified-text</code></em>}];<br>
Tinderbox User's avatar
Tinderbox User committed
690
	preferred-glue<em class="replaceable"><code>string</code></em>;<br>
691
	prefetch<em class="replaceable"><code>integer</code></em>[<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
692
	provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
693
	qname-minimization(strict|relaxed|disabled|off);<br>
694 695 696 697 698 699
	query-source(([address](<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv4_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
	query-source-v6(([address](<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<br>
	<em class="replaceable"><code>integer</code></em>|*)])|([[address](<em class="replaceable"><code>ipv6_address</code></em>|*)]<br>
	port(<em class="replaceable"><code>integer</code></em>|*)))[dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721
	rate-limit{<br>
		all-per-second<em class="replaceable"><code>integer</code></em>;<br>
		errors-per-second<em class="replaceable"><code>integer</code></em>;<br>
		exempt-clients{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		ipv4-prefix-length<em class="replaceable"><code>integer</code></em>;<br>
		ipv6-prefix-length<em class="replaceable"><code>integer</code></em>;<br>
		log-only<em class="replaceable"><code>boolean</code></em>;<br>
		max-table-size<em class="replaceable"><code>integer</code></em>;<br>
		min-table-size<em class="replaceable"><code>integer</code></em>;<br>
		nodata-per-second<em class="replaceable"><code>integer</code></em>;<br>
		nxdomains-per-second<em class="replaceable"><code>integer</code></em>;<br>
		qps-scale<em class="replaceable"><code>integer</code></em>;<br>
		referrals-per-second<em class="replaceable"><code>integer</code></em>;<br>
		responses-per-second<em class="replaceable"><code>integer</code></em>;<br>
		slip<em class="replaceable"><code>integer</code></em>;<br>
		window<em class="replaceable"><code>integer</code></em>;<br>
	};<br>
	recursion<em class="replaceable"><code>boolean</code></em>;<br>
	request-expire<em class="replaceable"><code>boolean</code></em>;<br>
	request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
	request-nsid<em class="replaceable"><code>boolean</code></em>;<br>
	require-server-cookie<em class="replaceable"><code>boolean</code></em>;<br>
722
	resolver-nonbackoff-tries<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
723
	resolver-query-timeout<em class="replaceable"><code>integer</code></em>;<br>
724
	resolver-retry-interval<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
725 726
	response-padding{<em class="replaceable"><code>address_match_element</code></em>;...}block-size<br>
	<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
727 728 729 730 731 732
	response-policy{zone<em class="replaceable"><code>string</code></em>[add-soa<em class="replaceable"><code>boolean</code></em>][log<br>
	<em class="replaceable"><code>boolean</code></em>][max-policy-ttl<em class="replaceable"><code>ttlval</code></em>][min-update-interval<br>
	<em class="replaceable"><code>ttlval</code></em>][policy(cname|disabled|drop|given|no-op|<br>
	nodata|nxdomain|passthru|tcp-only<em class="replaceable"><code>quoted_string</code></em>)][<br>
	recursive-only<em class="replaceable"><code>boolean</code></em>][nsip-enable<em class="replaceable"><code>boolean</code></em>][<br>
	nsdname-enable<em class="replaceable"><code>boolean</code></em>];...}[add-soa<em class="replaceable"><code>boolean</code></em>][<br>
Tinderbox User's avatar
Tinderbox User committed
733 734 735 736 737 738
	break-dnssec<em class="replaceable"><code>boolean</code></em>][max-policy-ttl<em class="replaceable"><code>ttlval</code></em>][<br>
	min-update-interval<em class="replaceable"><code>ttlval</code></em>][min-ns-dots<em class="replaceable"><code>integer</code></em>][<br>
	nsip-wait-recurse<em class="replaceable"><code>boolean</code></em>][qname-wait-recurse<em class="replaceable"><code>boolean</code></em>]<br>
	[recursive-only<em class="replaceable"><code>boolean</code></em>][nsip-enable<em class="replaceable"><code>boolean</code></em>][<br>
	nsdname-enable<em class="replaceable"><code>boolean</code></em>][dnsrps-enable<em class="replaceable"><code>boolean</code></em>][<br>
	dnsrps-options{<em class="replaceable"><code>unspecified-text</code></em>}];<br>
739
	root-delegation-only[exclude{<em class="replaceable"><code>string</code></em>;...}];<br>
Tinderbox User's avatar
Tinderbox User committed
740
	root-key-sentinel<em class="replaceable"><code>boolean</code></em>;<br>
741 742
	rrset-order{[class<em class="replaceable"><code>string</code></em>][type<em class="replaceable"><code>string</code></em>][name<br>
	<em class="replaceable"><code>quoted_string</code></em>]<em class="replaceable"><code>string</code></em><em class="replaceable"><code>string</code></em>;...};<br>
Tinderbox User's avatar
Tinderbox User committed
743 744 745 746 747 748 749 750 751
	send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
	serial-update-method(date|increment|unixtime);<br>
	server<em class="replaceable"><code>netprefix</code></em>{<br>
		bogus<em class="replaceable"><code>boolean</code></em>;<br>
		edns<em class="replaceable"><code>boolean</code></em>;<br>
		edns-udp-size<em class="replaceable"><code>integer</code></em>;<br>
		edns-version<em class="replaceable"><code>integer</code></em>;<br>
		keys<em class="replaceable"><code>server_key</code></em>;<br>
		max-udp-size<em class="replaceable"><code>integer</code></em>;<br>
752 753 754 755
		notify-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*<br>
		)][dscp<em class="replaceable"><code>integer</code></em>];<br>
		notify-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em><br>
		|*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
756 757
		padding<em class="replaceable"><code>integer</code></em>;<br>
		provide-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
758 759 760 761 762 763 764 765
		query-source(([address](<em class="replaceable"><code>ipv4_address</code></em>|*)[port<br>
		(<em class="replaceable"><code>integer</code></em>|*)])|([[address](<br>
		<em class="replaceable"><code>ipv4_address</code></em>|*)]port(<em class="replaceable"><code>integer</code></em>|*)))[<br>
		dscp<em class="replaceable"><code>integer</code></em>];<br>
		query-source-v6(([address](<em class="replaceable"><code>ipv6_address</code></em>|*)[<br>
		port(<em class="replaceable"><code>integer</code></em>|*)])|([[address](<br>
		<em class="replaceable"><code>ipv6_address</code></em>|*)]port(<em class="replaceable"><code>integer</code></em>|*)))[<br>
		dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
766 767 768 769 770 771 772
		request-expire<em class="replaceable"><code>boolean</code></em>;<br>
		request-ixfr<em class="replaceable"><code>boolean</code></em>;<br>
		request-nsid<em class="replaceable"><code>boolean</code></em>;<br>
		send-cookie<em class="replaceable"><code>boolean</code></em>;<br>
		tcp-keepalive<em class="replaceable"><code>boolean</code></em>;<br>
		tcp-only<em class="replaceable"><code>boolean</code></em>;<br>
		transfer-format(many-answers|one-answer);<br>
773 774 775 776
		transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|<br>
		*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
		transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<br>
		<em class="replaceable"><code>integer</code></em>|*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
777 778 779 780 781 782
		transfers<em class="replaceable"><code>integer</code></em>;<br>
	};<br>
	servfail-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
	sig-signing-nodes<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-signatures<em class="replaceable"><code>integer</code></em>;<br>
	sig-signing-type<em class="replaceable"><code>integer</code></em>;<br>
783
	sig-validity-interval<em class="replaceable"><code>integer</code></em>[<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
784
	sortlist{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
785 786
	stale-answer-enable<em class="replaceable"><code>boolean</code></em>;<br>
	stale-answer-ttl<em class="replaceable"><code>ttlval</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
787
	synth-from-dnssec<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
788
	transfer-format(many-answers|one-answer);<br>
789 790 791 792
	transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)][<br>
	dscp<em class="replaceable"><code>integer</code></em>];<br>
	transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<em class="replaceable"><code>integer</code></em>|*)<br>
	][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
793
	trust-anchor-telemetry<em class="replaceable"><code>boolean</code></em>;//experimental<br>
Tinderbox User's avatar
Tinderbox User committed
794 795 796
	trusted-keys{<em class="replaceable"><code>string</code></em><br>
	<em class="replaceable"><code>integer</code></em><em class="replaceable"><code>integer</code></em><br>
	<em class="replaceable"><code>integer</code></em><br>
Tinderbox User's avatar
Tinderbox User committed
797
	<em class="replaceable"><code>quoted_string</code></em>;...};deprecated<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
798
	try-tcp-refresh<em class="replaceable"><code>boolean</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
799 800 801
	update-check-ksk<em class="replaceable"><code>boolean</code></em>;<br>
	use-alt-transfer-source<em class="replaceable"><code>boolean</code></em>;<br>
	v6-bias<em class="replaceable"><code>integer</code></em>;<br>
802
	validate-except{<em class="replaceable"><code>string</code></em>;...};<br>
Mark Andrews's avatar
regen  
Mark Andrews committed
803 804
	zero-no-soa-ttl<em class="replaceable"><code>boolean</code></em>;<br>
	zero-no-soa-ttl-cache<em class="replaceable"><code>boolean</code></em>;<br>
805
	zone<em class="replaceable"><code>string</code></em>[<em class="replaceable"><code>class</code></em>]{<br>
Tinderbox User's avatar
Tinderbox User committed
806 807 808 809 810 811
		allow-notify{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		allow-query{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		allow-query-on{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		allow-transfer{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		allow-update{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
		allow-update-forwarding{<em class="replaceable"><code>address_match_element</code></em>;...};<br>
812 813 814
		also-notify[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<br>
		<em class="replaceable"><code>masters</code></em>|<em class="replaceable"><code>ipv4_address</code></em>[port<em class="replaceable"><code>integer</code></em>]|<br>
		<em class="replaceable"><code>ipv6_address</code></em>[port<em class="replaceable"><code>integer</code></em>])[key<em class="replaceable"><code>string</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
815
		...};<br>
816 817 818 819
		alt-transfer-source(<em class="replaceable"><code>ipv4_address</code></em>|*)[port(<br>
		<em class="replaceable"><code>integer</code></em>|*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
		alt-transfer-source-v6(<em class="replaceable"><code>ipv6_address</code></em>|*)[port(<br>
		<em class="replaceable"><code>integer</code></em>|*)][dscp<em class="replaceable"><code>integer</code></em>];<br>
Tinderbox User's avatar
Tinderbox User committed
820 821 822 823 824 825 826 827 828 829 830 831 832 833 834
		auto-dnssec(allow|maintain|off);<br>
		check-dup-records(fail|warn|ignore);<br>
		check-integrity<em class="replaceable"><code>boolean</code></em>;<br>
		check-mx(fail|warn|ignore);<br>
		check-mx-cname(fail|warn|ignore);<br>
		check-names(fail|warn|ignore);<br>
		check-sibling<em class="replaceable"><code>boolean</code></em>;<br>
		check-spf(warn|ignore);<br>
		check-srv-cname(fail|warn|ignore);<br>
		check-wildcard<em class="replaceable"><code>boolean</code></em>;<br>
		database<em class="replaceable"><code>string</code></em>;<br>
		delegation-only<em class="replaceable"><code>boolean</code></em>;<br>
		dialup(notify|notify-passive|passive|refresh|<br>
		<em class="replaceable"><code>boolean</code></em>);<br>
		dlz<em class="replaceable"><code>string</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
835
		dnskey-sig-validity<em class="replaceable"><code>integer</code></em>;<br>
Tinderbox User's avatar
Tinderbox User committed
836 837 838 839 840 841
		dnssec-dnskey-kskonly<em class="replaceable"><code>boolean</code></em>;<br>
		dnssec-loadkeys-interval<em class="replaceable"><code>integer</code></em>;<br>
		dnssec-secure-to-insecure<em class="replaceable"><code>boolean</code></em>;<br>
		dnssec-update-mode(maintain|no-resign);<br>
		file<em class="replaceable"><code>quoted_string</code></em>;<br>
		forward(first|only);<br>
842 843 844
		forwarders[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<br>
		<em class="replaceable"><code>ipv4_address</code></em>|<em class="replaceable"><code>ipv6_address</code></em>)[port<em class="replaceable"><code>integer</code></em>][<br>
		dscp<em class="replaceable"><code>integer</code></em>];...};<br>
Tinderbox User's avatar
Tinderbox User committed
845 846 847 848 849 850 851
		in-view<em class="replaceable"><code>string</code></em>;<br>
		inline-signing<em class="replaceable"><code>boolean</code></em>;<br>
		ixfr-from-differences<em class="replaceable"><code>boolean</code></em>;<br>
		journal<em class="replaceable"><code>quoted_string</code></em>;<br>
		key-directory<em class="replaceable"><code>quoted_string</code></em>;<br>
		masterfile-format(map|raw|text);<br>
		masterfile-style(full|relative);<br>
852 853 854 855
		masters[port<em class="replaceable"><code>integer</code></em>][dscp<em class="replaceable"><code>integer</code></em>]{(<em class="replaceable"><code>masters</code></em><br>
		|<em class="replaceable"><code>ipv4_address</code></em>[port<em class="replaceable"><code>integer</code></em>]|<em class="replaceable"><code>ipv6_address</code></em>[<br>
		port<em class="replaceable"><code>integer</code></em>])[key<em class="replaceable"><code>string</code></em>];...};<br>
		max-journal-size(default|unlimited|<em class="replaceable"><code>sizeval</code></em>);<br>
Tinderbox User's avatar
Tinderbox User committed
856 857 858 859 860 861 862 863 864 865 866 867 868
		max-records<em class="replaceable"><code>integer</code></em>;<br>
		max-refresh-time<em class="replaceable"><code>integer</code></em>;<br>
		max-retry-time<em class="replaceable"><code>integer</code></em>;<br>
		max-transfer-idle-in<em class="replaceable"